Your message dated Sun, 27 Jan 2019 12:21:46 +0000 with message-id <e1gnjra-000bit...@fasolo.debian.org> and subject line Bug#919535: fixed in surf 2.0+git20181009-4 has caused the Debian Bug report #919535, regarding surf: AppArmor profile forbids access to publicsuffix data to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 919535: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=919535 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: surf Version: 2.0+git20181009-2.1 Severity: normal Tags: patch Dear Maintainer, surf is not able to access the following two files due to its apparmor profile: [ 5565.325749] audit: type=1400 audit(1547681461.606:127): apparmor="DENIED" operation="open" profile="/usr/bin/surf" name="/usr/share/publicsuffix/public_suffix_list.dafsa" pid=29897 comm="WebKitNetworkPr" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [ 5565.328420] audit: type=1400 audit(1547681461.610:128): apparmor="DENIED" operation="open" profile="/usr/bin/surf" name="/usr/share/publicsuffix/public_suffix_list.dat" pid=29897 comm="WebKitNetworkPr" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 I have included a patch. Regards, Leo -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (500, 'testing') Architecture: armhf (armv7l) Kernel: Linux 4.19.0-1-armmp (SMP w/4 CPU cores) Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8) Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages surf depends on: ii libc6 2.28-5 ii libgcr-base-3-1 3.28.0-4 ii libgcr-ui-3-1 3.28.0-4 ii libglib2.0-0 2.58.2-3 ii libgtk-3-0 3.24.2-3 ii libwebkit2gtk-4.0-37 2.22.5-1 ii libx11-6 2:1.6.7-1 Versions of packages surf recommends: ii curl 7.62.0-1 ii suckless-tools 44-1 ii x11-utils 7.7+4 ii xterm [x-terminal-emulator] 342-1 Versions of packages surf suggests: ii apparmor 2.13.2-3 -- Configuration Files: /etc/apparmor.d/usr.bin.surf changed [not included] -- no debconf information>From 092793cac1b5dd01a62f910497c95b51d28dc674 Mon Sep 17 00:00:00 2001 From: Leo Singer <leo.sin...@ligo.org> Date: Wed, 16 Jan 2019 23:40:11 +0000 Subject: [PATCH] Tell apparmor to allow access to publicsuffix data --- debian/changelog | 7 +++++++ debian/usr.bin.surf | 1 + 2 files changed, 8 insertions(+) diff --git a/debian/changelog b/debian/changelog index 7e6f003..c002849 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,10 @@ +surf (2.0+git20181009-3.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Tell apparmor to allow read access to publicsuffix data. + + -- Leo Singer <leo.sin...@ligo.org> Wed, 16 Jan 2019 23:39:11 +0000 + surf (2.0+git20181009-3) unstable; urgency=medium * Fix path pattern for usrmerged paths in AppArmor profile. diff --git a/debian/usr.bin.surf b/debian/usr.bin.surf index f204a83..3a9b2d6 100644 --- a/debian/usr.bin.surf +++ b/debian/usr.bin.surf @@ -31,6 +31,7 @@ /usr/lib/@{multiarch}/webkit2gtk-4.0/WebKit*Process ix, /{dev,run}/shm/WK2SharedMemory.* rw, /var/tmp/WebKit-Media-* rw, + /usr/share/publicsuffix/public_suffix_list.{dat,dafsa} r, owner @{HOME}/.local/share/webkitgtk/ w, owner @{HOME}/.local/share/webkitgtk/** rw, owner @{HOME}/.cache/webkitgtk/ w, -- 2.20.1
--- End Message ---
--- Begin Message ---Source: surf Source-Version: 2.0+git20181009-4 We believe that the bug you reported is fixed in the latest version of surf, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 919...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Reiner Herrmann <rei...@reiner-h.de> (supplier of updated surf package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 27 Jan 2019 12:52:31 +0100 Source: surf Architecture: source Version: 2.0+git20181009-4 Distribution: unstable Urgency: medium Maintainer: Reiner Herrmann <rei...@reiner-h.de> Changed-By: Reiner Herrmann <rei...@reiner-h.de> Closes: 919534 919535 919536 Changes: surf (2.0+git20181009-4) unstable; urgency=medium . [ Leo Singer ] * AppArmor: allow access to publicsuffix data. (Closes: #919535) . [ Reiner Herrmann ] * AppArmor: - allow surf to create ~/.cache directory. (Closes: #919534) - include abstractions/video and allow reading additional sys file. (Closes: #919536) - allow site-specific additions and overrides. Checksums-Sha1: 35d621983f793cd943d33418c6f6704c754495fc 1999 surf_2.0+git20181009-4.dsc d78c9db021fbab900155a6d896d6303a4f6c7dda 7944 surf_2.0+git20181009-4.debian.tar.xz 7c763eb260448b6902228d192e5333b8d5eb4bac 14615 surf_2.0+git20181009-4_source.buildinfo Checksums-Sha256: 4f891b56de9311e6100a8794302cba6929d6752ee344c61645b93f1e14cd8896 1999 surf_2.0+git20181009-4.dsc 8ab8342bcebf2ecb35a762c6397280b45dc9f3de1f1789026b017f8a66be3502 7944 surf_2.0+git20181009-4.debian.tar.xz b66961bfae8853aef831d91c8503d98c34c880327a6f16d7407383b9143d15f2 14615 surf_2.0+git20181009-4_source.buildinfo Files: 902cb963678a9fdf64e91c04fab1e216 1999 web optional surf_2.0+git20181009-4.dsc e1a393328df46fd3b99c37d24f497606 7944 web optional surf_2.0+git20181009-4.debian.tar.xz a571643e39d3d3812638afa6ef964bb2 14615 web optional surf_2.0+git20181009-4_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE2Pb6feok2Q1urHM7zPBJKNsO6qcFAlxNm7YACgkQzPBJKNsO 6qehIBAAgvAMqYHUipyds8N14bSqofr67bEVmXHgyO3sJ3loBtPHeAbxPGjZUjFt abfpoH22xC81AYk3PJtrP+lvZy9DrSvpoFFZzokuaf/INZ4oSQJhF0wOS6OuOJwd 6NeRxMQ8qIJw8WJZhdduFFT59B6BU9BEP0+G2tgRSkVmaVw2I3ZZOh+yg0Nj+Zbk PSa2vH6ogyvu1MgCc1mB5hxyQHBrzhMZhQ6MKtIwXBvph/PQSZUrWO5Iiq4FItQM 8qbDMVuVbyDTPIK/vbNO9ByDD4z5sc24h+804pZDnPb+Ye/P4OYg13FIvIapFkj4 EFdwDWsapYtfWOKtempAN0MJNVS+9DWgdudMgBpK5sg+OvjX0EoOWQWeVSlui0HD mygYHUE0yaHS1Axbt6kXc2SJHvRyBMBuZUwff3WD9Z3YkeEPxjFTbs9qWsIwKWkm bHh0vUDcCwSIBvD4KwMVf0CX5EW35RueKmJmV5D1LdSVL6FxVIfEDa119LmSsOy1 QdS0IrtslPEok5wy264BzHjNstgO+8w6p55TPTCByVkzrbQHYIPor7tT0Tzr4/Tw w/lv+PgpucWZOSoS51FNX0H5bEs5/X4PZ2gxe5MhpqEEkXmlu20gY/qEVB2DFWEe 1vXZzJ9PMes2CFlKNZLh298MbjCnZr0ZaZYQKCkGeVjRwNWxgoo= =RkmC -----END PGP SIGNATURE-----
--- End Message ---
